Select a Province & Language

Please click "Apply" to update your preferences

Sélectionner une province et une langue

Veuillez cliquer sur « Appliquer » pour mettre à jour vos préférences

Skip to Content

Global supply issues affecting the automotive manufacturing industry are causing new vehicle delivery delays and inventory of some vehicles may be limited. Please for information about availability of your preferred Toyota vehicle.

Privacy Policy

Toyota (Lexus) (Scion) Privacy Policy Respecting Customer Information

The Toyota (Lexus) (Scion) Commitment to Your Privacy

Toyota Canada Inc. (“TCI”), which includes Toyota, Lexus and Scion brands, respects your right to privacy. This Policy outlines how TCI’s privacy principles protect your privacy as a key part of TCI’s on-going sales and services relationship with you as a valued Toyota (Lexus)(Scion) customer. The privacy principles apply to all personal information that TCI collects from customers. Personal information refers to any personally identifiable information about you. It does not include aggregate information that does not identify you specifically.

What Personal Information Does TCI Collect?

In connection with your vehicle purchase, TCI collects the information provided by you that is necessary for your Toyota (Lexus)(Scion) dealership to complete the transaction, including your name, address, telephone number(s), email address, driver’s license and insurance information. TCI also records information respecting the vehicle purchased, the purchase price and other transaction information. TCI will also collect personal information from you through customer surveys, inquiries or requests for information and your visits to TCI Platforms. You will only be asked to provide personal information in order to enable TCI to provide you with a service (such as sending you a new vehicle brochure, assisting you in contacting a dealership, or enabling you to complete online credit or job applications).

If you apply for credit with Toyota Credit Canada Inc. (“TCCI”), TCCI will obtain credit approval information from you and third parties. The full TCCI Privacy Policy, which outlines how TCCI’s privacy principles protect your privacy as a key part of its ongoing business relationship with you as a valued Toyota (Lexus)(Scion) customer, is available here: TCCI Privacy Policy.

TCI will collect information relating to your service transactions with authorized Toyota (Lexus)(Scion) dealerships. As part of TCI’s on-going efforts to better understand your automotive needs and improve the products and the quality and efficiency of TCI and TCI’s dealership’s provision of these products and services to you, TCI will, from time to time, ask you to provide information regarding your purchase preferences, demographics and lifestyle through customer surveys.

TCI will also collect any information that you provide through your customer service inquiries or when TCI responds to your requests for information.

TCI also collects information that you provide during visits to TCI web sites, interactive features, applications, Twitter, Facebook and other social media networks, (“Platforms”) including contact information, vehicle information, customer survey information, visitor’s dealership and language preferences, owner information, and contest entry information.

How is Your Personal Information Used?

TCI may use your personal information for the following purposes:

  • to complete sales and service transactions with you;
  • to respond to your requests for products, services or information;
  • to improve products and services and better understand your automotive needs, including through customer surveys;
  • to improve the operation/administration of our independently owned and operated dealer network, including quality assurance and training;
  • to administer your new vehicle warranty coverage, recalls, your Extra Care Protection and/or Roadside coverage;
  • to increase your awareness of Toyota, Lexus or Scion brand products and services; and
  • to include you in advertising or marketing campaigns to offer you TCI’s or other products and/or services where you have subscribed to such communications.

With Whom is Your Personal Information Shared?

For the purposes outlined above TCI may share your personal information with Toyota Credit Canada Inc. and with Toyota (Lexus) (Scion) dealerships and dealer associations.

TCI will also share your information with select TCI marketing partners who may provide you with information about their products and services. You will be provided with an opportunity to opt-out of communications with TCI’s marketing partners. Your personal information may be transferred to third party service providers that TCI uses to assist in managing and processing your personal information. TCI’s third party service providers are required to use, maintain and disclose your personal information only in accordance with TCI’s instructions to them and only on TCI’s behalf.

TCI will not disclose any of your personal information to any other persons, except (i) with your prior consent; (ii) in connection with a sale of all or substantially all of the assets of one of TCI’s businesses; or (iii) as may be required or permitted by law.

Connected Vehicle Services

Some of our products and services may have additional privacy terms that apply, such as vehicles equipped with Connected Services technologies. Please go to our Connected Services Privacy Notice at www.toyota.ca/connectedservices-privacy to learn more about our Connected Services vehicle and personal data collection, use and sharing practices. Where product- or service-specific terms conflict with this Privacy Policy, the product or service specific terms shall govern.

Does TCI Transfer Information Outside of Canada?

The personal information that you provide to TCI may be transferred outside of Canada for processing. TCI may store personal information on servers located in other jurisdictions, including the United States. Please note that the privacy laws in such jurisdictions differ from Canadian privacy laws and that in some jurisdictions your personal information may be accessed by law enforcement authorities or the courts.

If you would like to obtain more information about TCI’s policies and practices with respect to the transfer and processing of personal information outside of Canada, please contact TCI in any of the ways described below at “How You Can Review and Update Your Personal Information”.

Your Consent

Your consent may be given expressly or implied, depending on the circumstances.

In connection with your vehicle purchase or certain service requests you will be asked to consent expressly to TCI’s collection of personal information for the purposes identified herein.

When you visit TCI’s Platforms ) you consent to TCI’s collection, use and disclosure of your personal information that you provide on the Platforms. In some cases the Platforms may prompt you to provide your consent to the collection of certain personally identifiable information. By clicking “I have read and I agree” you are giving TCI permission, as applicable, to collect, use and disclose your personal information as described above under the headings “What Personal Information Does TCI Collect”, “How is Your Personal Information Used” “With Whom is Your Personal Information Shared?”.

In other cases, your consent is understood, such as when you respond to a customer satisfaction survey, request a product information brochure from the Platforms, register for updates on the Platforms or complete an online job application.

By providing any personal information in any email request or any interactive activities on TCI’s Platforms you consent to TCI’s collection of that information.

You may at any time withdraw or change your consent to TCI’s use or disclosure of your personal information, or request TCI to delete it from TCI’s files, subject to legal and contractual restrictions. However, if you do not provide personal information required to supply a product or service, TCI may not be able to provide that product or service.

Unless you request TCI not to do so, you agree that TCI may use and disclose to TCCI , to Toyota (Lexus)(Scion) dealerships and to dealer associations your personal information for the purposes of selectively including you in advertising and marketing campaigns designed to increase the awareness of Toyota, Lexus or Scion brand products and services and the goodwill associated with TCI’s businesses. Some of TCI’s advertising and marketing campaigns include sending out Toyota, Lexus or Scion newsletters, service reminders and promotional offers. If you would prefer that TCI not use your personally identifiable information for such advertising or marketing campaigns, please contact TCI in any of the ways described below under the heading “How You Can Review and Update Your Personal Information”. You may notify TCI that you do not wish us to use your personal information for any purposes that are not required to supply you with a product or service at any time by contacting us in any of the ways described below under the heading “How You Can Review and Update Your Personal Information”. TCI will seek your further consent to any additional uses of personal information for which TCI has not obtained your consent previously.

Your Consent and Electronic Messages

TCI will only send email, text or other electronic messages to you if you have existing vehicle warranty and/or Extra Care Protection coverage or some other form of business relationship with TCI, or have asked for or otherwise agreed to receive emails, texts or other electronic messages from TCI. Any electronic message that you receive from TCI will identify TCI as the sender, enable you to contact TCI directly and provide for a means of unsubscribing from further electronic messages. TCI may also from time to time request your consent on behalf of any of or all of TCCI, Toyota (Lexus) (Scion) dealerships and dealer associations, and Toyota marketing partners. Electronic messages that you receive from any of these entities will identify the sender, enable you to contact the sender directly and provide for a means of unsubscribing from further electronic messages from the sender, and in the case of Toyota marketing partners, unsubscribe from all Toyota marketing partner electronic messages.

TCI’s Web Sites

Non-Personally Identifiable Information. When you visit TCI’s web sites, unless you tell TCI who you are or reveal any other personal information, TCI does not collect or store any information about you. The only information TCI collects and stores is non-personally identifiable information such as the name of your Internet service provider, the type of the Internet browser you used, and referring web site and the pages you request. TCI uses this non-personally identifiable information to generate aggregate statistics regarding TCI’s web site activity.

Cookies. Cookies are files that your web browser places on your computer's hard drive that permit TCI to tell whether, and if so, how many times, you have accessed TCI’s web sites previously, your language of choice, your dealer of choice, the province in which your internet provider resides, internet user behavioral analysis, and your computer system’s flash preference. You may choose to decline to accept cookies if your browser permits but doing so may affect your use of TCI’s web sites and your ability to access certain features of the web sites.

Pixel tags. A pixel tag is a transparent graphic image, sometimes called a web beacon, clear GIFs or tracking beacon, placed on a web site or in an e-mail, which indicates to us that a page or e-mail has been viewed. In addition, a pixel tag may tell your browser to get content from another server.

Third-Party Links. TCI’s web sites contain links to other sites. When you click on links that take you to third party web sites, you will be subject to the third parties' privacy policies. While TCI supports the protection of privacy on the Internet, TCI is not responsible for the actions of third parties or for their privacy practices. TCI encourages the users of its web sites to be aware when they leave the web sites and to read the privacy policies of each and every web site with which they interact.

Children. TCI does not use its web sites to knowingly solicit personal information from or to market to persons under the age of majority.

Advertising/Behavioral Targeting; How to Opt-Out

TCI licenses technology to serve advertisements on its own web sites and within its content as that content is served across the Internet.

Ad network providers, data providers, publishers and other media-related companies, and/or analytics service providers may set and access their own cookies, pixel tags and similar technologies on your device’s web browser and they may otherwise collect or have access to information about you. We and they may use information about your browsing behavior on one or multiple devices to establish an online profile and to target advertisements for products and services in which you might be interested based on your visits to both the TCI web sites and other web sites. We and they may use a variety of companies to serve advertisements.

If you prefer not to allow TCI to use these technologies to collect or use your personal information for the purposes of targeted advertising on TCI’s web sites, you may opt-out by clicking here. If you prefer not to allow TCI, or third parties acting on TCI’s behalf, to use these technologies to collect or use your personal information for purposes of targeted advertising on third-party websites, you may opt-out by following the procedure on the NAI Opt-Out Page.

These opt-outs will not be effective if your browser is configured to reject cookies, or if you subsequently erase your cookies, use a different computer or change browsers.

In addition, TCI may use third-party ad networks, publishers and other entities to serve advertisements and third party analytics vendors to evaluate and provide us with information about the use of the TCI web sites and viewing of our content. For example, we may share personal information with third parties (e.g., social media sites, other advertisers, advertising agencies, advertising networks, data exchanges, etc.) in order to deliver to you content on our website or third party sites. For information about your ability to opt-out of this, please contact us at socialmedia@toyota.ca

Please note that even if you opt-out, you will still see advertisements while you're browsing online. However the advertisements you see may be less relevant to you and your interests. Additionally, many network advertising programs allow you to view and manage the interest categories they have compiled from your online browsing activities. These interest categories help determine the types of targeted advertisements you may receive. The NAI Opt-Out Page provides a tool that identifies its member companies that have cookies on your browser and provides links to those companies.

Moreover, if you would like to access and/or delete any personal information that Google (one of our analytics and ad service partners) holds about you, then you may do so via “My Activity”.

How Long Does TCI Retain Your Personal information?

TCI retains your personal information as long as is required for the purposes identified when you provided the personal information and for any new purposes identified and consented to by you, and for an appropriate time thereafter.

Your personal information will be kept in files stored on TCI’s databases located at TCI’s head office located in Toronto, Ontario.

How Does TCI Protect Your Personal Information?

TCI protects your personal information using security systems appropriate to the sensitivity of the information. TCI’s web sites are members of the Entrust Digital Certificate Program which involves applying security sockets layer software encryption technology to all information that you submit through the web sites. TCI applies security safeguards required for compliance with the Entrust Digital Certificate Program. Please note: You are solely responsible for maintaining the confidentiality of your password(s).

How You Can Review and Update Your Personal Information

You may review, update or correct any of your personal information held in TCI’s files and your consents regarding its use and disclosure at any time by contacting TCI’s Privacy Officer in any of the ways indicated below.

If you have any questions or concerns regarding TCI’s policy and procedures, if you wish to change your consent to TCI’s use and disclosure of your information, or if you wish to review, update, correct or have TCI delete your information from files, please contact:

Privacy Officer
Toyota Canada Inc.
One Toyota Place
Toronto, Ontario
M1H 1H9

by telephone: Dial and Call Dial and Call 1-888-TOYOTA-8 or Dial and Call Dial and Call 1-800-26-LEXUS or Dial and Call Dial and Call 1-866-9-SCION-1
or by visiting us at toyota.ca or lexus.ca or scion.ca

Will TCI’s Privacy Policy Change?

TCI reserves the right, at any time, to modify this Policy at TCI’s sole discretion, and you agree to be bound by any such modifications, which shall be effective immediately upon TCI posting the revised Policy on TCI’s web sites.

POSTED: February 2020

TCCI Privacy Policy

Toyota Credit Canada Inc.

Toyota Credit Canada Inc. ("TCCI" or “we”, “us”, “our”) operates throughout Canada under the business name of "Toyota Financial Services”. TCCI is the financial services provider to the Distributor (defined below).

This Privacy Policy

As a provider of financial services, the collection, use, and disclosure of your personal information is very important to our day-to-day business operations. The purpose of this Privacy Policy ("Privacy Policy") is to inform you of the specific types of personal information we collect, why we collect it, how it is used, how it is disclosed and how you may correct errors in your personal information collected by us.

In this Privacy Policy, the “Distributor” is the Canadian distributor of the vehicle for which you are applying for credit or for which you have entered a finance or lease agreement and the “Dealer” is the Distributor’s authorized dealership through whom you are applying for credit or through whom you have leased or financed your vehicle.

This Privacy Policy applies to information we collect, use, or disclose about our customers, including information you provide:

  • When you submit your credit application (the “Application”).
  • When you enter into a finance or lease agreement with us (the “Agreement”).
  • On or through portal.toyotafinancial.ca (the “Portal”).
  • In email, text, and other electronic messages between you and us.

The Portal may include links to third-party websites, plug-ins, services, or applications. Clicking on those links or enabling those connections may allow the third party to collect or share data about you. If you follow a link to a third-party website or engage a third-party plugin, please note that these third parties have their own privacy policies and we do not accept any responsibility or liability for these policies. We do not control these third-party websites, and we encourage you to read the privacy policy of every website you visit.

We understand the importance of your personal information and take pride in our commitment to maintaining its confidentiality. We ensure that your personal information is collected, used and disclosed only in the manner in which you have consented. Our organization ensures that we meet or exceed the requirements of all laws and regulations applicable in Canada.

Please read this policy carefully to understand our policies and practices for collecting, processing, and storing your information. If you do not agree with our policies and practices, your choice is to not provide information to TCCI or not use the Portal.

What is "Personal Information"?

"Personal information" is any personally identifiable information about you, which may include, but is not limited to, your name, mailing address, credit history, credit card number, banking information and voice recordings as well as the terms of your financing and lease agreements (as applicable). It does not include aggregated information that does not allow you to be directly identified.

How Do We Collect Personal Information?

When you finance or lease a vehicle through us, we will collect the personal information you provide to us in your credit application.

Your personal information is also collected when you enter into a finance or lease agreement with us, and when you provide documents, including banking or insurance documents, necessary for the administration of your finance or lease agreement with us.

We may also collect information during our interactions with you for our mutual protection including, monitoring or recording your telephone discussions with our representatives for servicing accuracy, quality assurance and/or for training purposes. We may also collect your personal information from third parties including, but not limited to, third parties referenced on your credit application and other credit providers or credit bureaus, however, your consent will have always been obtained prior to any third parties being approached. For example, when you have given us your consent to contact your references or your employer by providing us with their contact information on your credit application.

When you access and use the Portal, we use different methods to collect your personal information, including through:

  • Direct interactions with you when you provide personal information to us, for example, by filling in forms, uploading documents, or corresponding with us by phone, email, or otherwise.
  • Automated technologies or interactions, as you navigate through the Portal. Information collected automatically may include usage details, IP addresses, and information collected through cookies and other tracking technologies.

The information we collect directly from you on or through the Portal may include:

  • Information that you provide by filling in forms or uploading documents on our Portal. This includes information provided at the time of registering to use our Portal, or when requesting further services. We may also ask you for information when you report a problem with our Portal.
  • Records and copies of your correspondence (including email addresses), if you contact us by correspondence.
  • Your responses to surveys that we might ask you to complete for research purposes.
  • Details of the transactions you carry out through our Portal, such as updating your account information, and our fulfillment of your request. You may be required to provide financial information before placing a request through our Portal.
  • Your search queries on the Portal.

Information We Collect Through Cookies

We use cookies to analyze traffic on the Portal and to make improvements to the Portal in order to create the best possible experience for users. We also share information about your use of the Portal on an anonymous basis with our analytics partners (including advertisers, ad networks and servers, content providers, and application providers) who may combine it with other information that you’ve provided to them or that they have collected from your use of their services. By continuing to use the Portal, you consent to our use of cookies.

How is Your Personal Information Used and Disclosed?

We may use and share your Application and Agreement personal information with the Distributor, your Dealer and the third parties described below, for the following purposes:

  • To help us evaluate your credit application to finance or lease a vehicle through us.
  • To credit bureaus, consumer reporting agencies and other credit providers for the purpose of evaluating your credit application and confirming, verifying and updating any information (including but not limited to, your account balance and payment record) provided to us regarding your credit application or your finance or lease agreement.
  • To the Dealer for the purpose of assessing your credit application and/or informing them of our decision on your credit application.
  • To help us detect and prevent fraud.
  • To third party service providers for the purpose of detecting and preventing fraud.
  • Account administration, including collection of overdue accounts, audit and archival purposes.
  • To third party service providers for the purpose of collecting on an overdue account, for registering our security interest on your vehicle and to confirm that valid insurance has been purchased for your vehicle.
  • Third party service providers for the administration of optional products and services that you have purchased.
  • To a third party in connection with a transfer or assignment by us of our interest in your lease or finance agreement, including securitization transactions.
  • To include you in any advertising or marketing campaigns in which we alone or, together with the Distributor and its dealers, offer you our or their products and/or services. To respond to your requests for products, services or information, and improve our services, information and products, including asking you to reply to customer surveys. To better understand your automotive needs and to increase your awareness of the Distributor’s brand of products and services and the goodwill associated with our businesses.

We use personal information that we collect about you or that you provide to us on or through the Portal, for the following purposes:

  • To present our Portal and its contents to you.
  • To provide you with information, products, or services that you request from us.
  • To fulfill the purposes for which you provided the information or that were described when it was collected, or any other purpose for which you provide it.
  • To provide you with notices about your account.
  • To carry out our obligations and enforce our rights arising from any contracts with you, including for billing and collection or to comply with legal requirements.
  • To notify you about changes to our Portal or any products or services we offer or provide to you.
  • To improve our Portal, products or services, marketing, or customer relationships and experiences.
  • In any other way we may describe when you provide the information.
  • For any other purpose with your consent.

We may also use your information to contact you about our own and third-parties' goods and services that may be of interest to you, as permitted by law. If you do not want us to use your information in this way, please use the unsubscribe mechanism at the bottom of our marketing e-mails or contact us by telephone at Dial and Call 1-888-TOYOTA-8.

We may share personal information that we collect or you provide through the Portal as described below:

  • To your Dealer for the purposes of updating your contact information in the Dealer’s records.
  • To the Distributor for the purpose of including you in any advertising or marketing campaigns in which we alone or, together with the Distributor and its dealers, offer you our or their products and/or services.
  • To third party service providers for the purpose of: (1) collecting on an overdue account, for registering our security interest on your vehicle and to confirm that valid insurance has been purchased for your vehicle; (2) account administration, including collection of overdue accounts, audit and archival purposes; (3) the administration of optional products and services that you have purchased; (4) responding to your requests for products, services or information, and improving our services, information and products, including asking you to reply to customer surveys; and (5) better understanding your automotive needs and to increase your awareness of the Distributor’s brand of products and services and the goodwill associated with our businesses.
  • To a third party in connection with a transfer or assignment by us of our interest in your lease or finance agreement, including securitization transactions.
  • To fulfill the purpose for which you provide it.
  • For any other purpose disclosed by us when you provide the information.
  • With your consent.

We may also share your personal information:

  • To comply with any court order, law, or legal process, including to respond to any government or regulatory request, in accordance with applicable law.
  • To enforce or apply the Portal’s Legal Terms and Conditions (available at portal.toyotafinancial.ca) and other agreements, including for billing and collection purposes.
  • If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of TCCI, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Your Consent

We will only collect, use and disclose your personal information with your consent.

Your consent may be given expressly or implied, depending on the circumstances. In connection with your Application(s) and Agreement(s) you will be asked to consent expressly to our collection of personal information for the purposes identified herein. In other cases, your consent is understood, such as when you respond to a customer satisfaction survey, register for updates on this Portal or speak with our representatives after having been notified that the call may be recorded.

Customers who prefer not to have their calls recorded can conduct their business with us in writing or you can immediately advise the Customer Service representative that you do not wish to be recorded and we will ensure that procedures are activated to comply with your request.

You may notify us that you do not wish us to use your personal information for any purposes that are not required to supply you with a product or service at any time by contacting us in any of the ways described below under the heading "How You Can Review and Update Your Personal Information". We will seek your further consent to any additional uses of personal information for which we have not obtained your consent previously.

Subject to legal and contractual restrictions, you may at any time withdraw or change your consent to our use or disclosure of your personal information, or request us to delete it from our files. However, if you do not provide personal information required to supply a product or service or withdraw or change your consent, we may not be able to provide that product or service. Notwithstanding any withdrawal of consent, we may retain and use your information for account administration purposes, including collection of any amounts you owe us.

We do not knowingly collect personal information from anyone under the age of 14 (“child” or “children”). If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we take steps to delete that information.

With Whom is Your Personal Information Shared?

For the purposes outlined above we may share your personal information with the Distributor, the Dealer and with third parties. We will not disclose any of your personal information to any other persons except with your prior express consent, or in connection with a sale of all or substantially all of the assets of one of our businesses, or as may be required or permitted by law.

Your personal information may be transferred to third party service providers that we use to assist in managing and processing your personal information. Our third party service providers are required to use, maintain and disclose your personal information only in accordance with our instructions to them and only on our behalf.

We will also share your information with our joint-marketing partners who may provide you with information about their products and services. You will be provided with an opportunity to opt- out of communications with our joint-marketing partners.

Does TCCI Transfer Information Outside of Canada?

The personal information that you provide to TCCI may be transferred outside of Canada for storage and processing. TCCI uses service providers that store and process your personal information on servers located in Canada and the United States. When TCCI uses service providers to store and process your personal information, TCCI's policy is to have appropriate contractual provisions in place with those service providers limiting the purposes for which your personal information is being transferred to them and stipulating security requirements for that information. Please note that the privacy laws in other jurisdictions may differ from Canadian privacy laws and in some jurisdictions your personal information may be accessed by law enforcement authorities or the courts. If you have any questions regarding our policies and practices relating to storage and processing of personal information outside of Canada, please contact us in any of the ways described below under "How You Can Review and Update Your Personal Information".

How Long Do We Retain Your Personal information?

We retain your personal information as long as is required for the purposes identified when you provided the personal information and for any new purposes identified by us and consented to by you, and for an appropriate time thereafter.

Under some circumstances we may anonymize, pseudonymise, or de-identify your personal information so that it can no longer be associated with you. We reserve the right to use such anonymous, pseudonymous, or de-identified data for any legitimate business purpose without further notice to you or your consent.

How Do We Protect Your Personal Information?

We protect your personal information using security systems appropriate to the sensitivity of the information. In our ongoing effort to safeguard your personal information from unauthorized collection, use or disclosure, we have put in place a number of safeguards including; contractual, organizational, structural and technological security standards.

How You Can Review and Update Your Personal Information

You may review, update or correct any of your personal information held in our files and your consent regarding its use and disclosure at any time by contacting us in any of the ways indicated below. Please note, we rely primarily on you to provide us with your most complete, accurate and up-to-date personal information and to inform us of any changes to your personal information.

If you wish to change your consent to our use and disclosure of your information, or if you wish to review, update, correct or have us delete your information from our files, please contact us as follows:

Customer Service Manager
Toyota Credit Canada Inc.
80 Micro Court, Suite 200
Markham, Ontario
L3R 9Z5

or by telephone: Dial and Call Dial and Call 1-888-TOYOTA-8

If you have any questions or concerns regarding our privacy policy and procedures, including with respect to your right to access or rectify your personal information, or to withdraw your consent, please contact the Privacy Officer at privacy@toyotacredit.ca or using the address provided below:

Privacy Officer
Toyota Credit Canada Inc.
80 Micro Court, Suite 200
Markham, Ontario
L3R 9Z5

Will this Privacy Policy Change?

We reserve the right, at any time, to modify this Privacy Policy at our sole discretion, and you agree to be bound by any such modifications, which shall be effective immediately upon our posting the revised Privacy Policy on our web site or the Portal.

POSTED: September 22, 2022

Toyota Canada Inc.
Connected Services Privacy Notice

Updated as of June 24, 2022

We may modify this Privacy Notice by posting a new version at www.toyota.ca/connectedservices-privacy or www.lexus.ca/connectedservices-privacy, effective on the date of publication. Your continued use of the Services (as that term is defined in the Vehicle Connected Services Terms of Use) after we make changes indicates that you accept and consent to those changes, so please check this Privacy Notice periodically for updates. We will notify you in advance of any material changes to this Privacy Notice and obtain your consent to any new ways that we collect, use, and disclose your personal information.

Toyota Supra Connect: This Privacy Notice DOES NOT apply to use of Toyota Supra Connect. Please visit supraconnect.ca for relevant terms.

This Privacy Notice DOES NOT apply to data collection unrelated to the Services, for example: on Toyota or Lexus websites, on sites that we do not own, operate, or control, or at in-person events.

This Privacy Notice DOES NOT apply to any Toyota or Lexus vehicles equipped with the Services located outside of Canada, the continental United States, Alaska, and Hawaii.

This Privacy Notice MAY NOT apply to rental vehicles to the extent certain Services are not made available by the rental company. For rental vehicles, the terms and conditions and privacy policy of the applicable rental company may also govern how data about the vehicle is collected and used.

I. INTRODUCTION

This Privacy Notice applies to your personal information and vehicle data that we collect, use, store, share and secure to provide the Services to you, including when you use the Toyota or Lexus apps. This Privacy Notice also applies to vehicles manufactured in partnership with other companies that are equipped with Toyota Connected Services, including the Subaru Solterra.

Privacy laws in Canada generally define "personal information" as any information about an identifiable individual, which includes information that can be used on its own or with other information to identify, contact, or locate a single person.

  1. How We Use, Store, Share and Secure Data From You and Your Vehicle Equipped With the Services. When you purchased or leased your vehicle, your vehicle may have been equipped with an active “Connected Services” or “Vehicle Wireless Services” system which operates by collecting data from you and your vehicle, including vehicle location, vehicle health and driving data, to support navigation assistance, emergency services, remote engine start, maintenance alerts, infotainment apps and more, all as described in this Privacy Notice. When you purchased or leased a vehicle equipped with a “Connected Services” system, you had the opportunity to opt-in to receiving the Services, and in the event you did not want to receive the Services, you were presented with instructions on how to disable the Services upon taking possession of the vehicle. When opting-in to receive the Services, you also specifically consented to our collection, use, and disclosure of your personal information and vehicle data and our storage of such data as described in this Privacy Notice. You are in control over the “Connected Services” system. You can choose to opt-out of the Services at any time. You can also request deactivation of data transmission, which disables our collection and use of vehicle data and certain personal information through the Services.

    The bolded terms used below are defined in Section II of this Privacy Notice.

    1. Safety Connect. Your vehicle’s Safety Connect feature provides roadside and emergency assistance, automatic collision notifications, stolen vehicle assistance and accident advisory services. Safety Connect uses your vehicle’s Location Data or “vehicle location” (your vehicle’s latitude and longitude) to determine where your vehicle needs assistance and to dispatch assistance to you, your Vehicle Information (such as your vehicle’s model, year, and VIN) to verify your vehicle type and to help emergency responders identify your vehicle, your Account Information (such as your name, address, phone number, email address, etc.) to verify your identity and account, and your Voice Recordings (when you call our Response Center) for quality assurance.
    2. Service Connect. Your vehicle’s Service Connect feature uses your Account Information and your Vehicle Health Data (such as odometer readings, fuel level, oil life, and diagnostic trouble codes) to send you vehicle health reports, alert you of needed maintenance, and subject to your consent, to contact you by phone for service-related marketing.
    3. Remote Connect. Certain Remote Connect services such as vehicle finder, vehicle status, remote door lock and unlock, guest driver monitor, and vehicle alerts use your vehicle’s Location Data to find your vehicle and Vehicle Health Data to provide status updates as well as facilitate repairs.
    4. Navigation. Your vehicle’s navigation feature (such as Drive Connect) allows you to choose a place of interest, a location on a map, one of your favorites, a destination from your history, or enter an address or coordinates (latitude and longitude). In certain vehicles, navigation includes the Destination Assist program, which connects you with a live agent to provide navigation directions. Your vehicle’s Location Data and your Account Information are used to verify your account and to offer these features.
    5. Digital Key. Digital Key technology allows you to access (e.g. unlock, lock, start) your vehicle through the Toyota or Lexus app. When you bring your smartphone close to your vehicle, the app authenticates an encryption key before performing a vehicle function (e.g. unlock, lock, start). Your Account Information is used to offer this feature.
    6. App Suite, Toyota/Lexus+ Compatible Third Party Services, and other Services You Connect. The App Suite is available even if you do not have a subscription for the Services. To use the App Suite, you must download the application and accept the End User License Agreement. When you use our App Suite for traffic, fuel, weather, music or other apps, you will need to sign into your account with each compatible third party service in the App Suite; and we will pass the log-in information that you provide to us to the corresponding compatible third party service. Each compatible third-party service in the App Suite will also be given access to the vehicle data necessary for you to use its service. For more information about the vehicle information needed by each third-party service, please review the applicable third-party service’s privacy policy. We will use Voice Recordings to improve our responses and voice recognition. To facilitate functionality of your App Suite and linked third party services, your vehicle may share your Location Data and Voice Recordings transcriptions with your third-party services and upon their receipt, the respective third party’s privacy policy and terms will apply to their use of your Location Data and Voice Recording.
  2. We Protect Your Data
    1. We protect your data through multi-layer defense technologies determined by the use of a risk-based secure by design program that relies upon a range of technical and administrative controls, such as the use of dedicated networks and encryption, as appropriate. Your vehicle is designed only to respond to commands from you and any authorized users, or from us and only for those features we provide, including door unlock, remote engine start and vehicle finder.
    2. Your Account Information (e.g., name, address, phone number, email), provided when you subscribe for the Services, is retained on servers that are secured according to industry best practices and which provide a level of protection that is reasonable given the sensitivity of the information, the purposes for which it is to be used, the quantity and distribution of the information and the medium on which it is stored.
  3. Your Responsibilities

    As the owner/lessee of a vehicle equipped with a “Connected Services” system, you are responsible for: (1) informing passengers and drivers of your vehicle of how and why data is collected and used by us, (2) notifying us of a subsequent sale or transfer of your vehicle to another owner/lessee, and (3) deleting your personal and vehicle information contained in the vehicle, and your vehicle information contained in your Toyota or Lexus app, prior to the sale or transfer of your vehicle to another owner/lessee. If you do not notify us of a sale or transfer, your information may continue to be accessible from the vehicle and/or we may continue to send data about the vehicle to your account. To avoid this from occurring, and to ensure your privacy and that of the new owner/lessee, you must advise us of the sale or transfer and delete your personal and vehicle information prior to the sale or transfer. We are not responsible for any privacy related damages suffered by you or the new owner/lessee as a result of failure to take these steps.

II. COLLECTION AND USE

  1. On a Regular and Continuous Basis, We Collect and Use Your
    1. Account Information. When you enter or update your name, address, phone number, email address, language preference and other information linked or directly related to you (“Account Information”), we create or update your account so that we can provide the Services and communicate with you. We collect and use Account Information so that we can provide the Services and communicate with you.
    2. Vehicle Information. We collect your vehicle’s make, model, year, body type, VIN and other information linked to your vehicle (“Vehicle Information”) so we can verify your vehicle type and provide the Services.
    3. Location Data. We collect and use your vehicle’s latitude and longitude (“Location Data” or “vehicle location”) to deliver the Services and App Suite services to you and for quality confirmation and product development. We record and transmit your vehicle’s Location Data when you contact us for emergencies, roadside assistance, stolen or missing vehicle, missing persons, and destination services.
    4. Remote Data. At last ignition off, we may collect the real time status of your vehicle (i.e., vehicle location, status of powered doors, windows, hood, trunk, sunroof, hazard lights, odometer reading, oil life, fuel economy, trip distance, distance to empty) so you can remotely access your vehicle’s most recent information. This information is used to deliver Remote Connect services to you.
    5. Driving Data. We collect your driving behavior data (“Driving Data”) which includes the acceleration and speed at which your vehicle is driven, travel direction, and use of the steering and braking functionality in your vehicle. Driving Data is used to deliver the Services and App Suite services to you, and for quality confirmation, and product development.
    6. Vehicle Health Data.
      1. Vehicle Health Data” includes odometer readings, fuel level, oil life, Diagnostic Trouble Codes, and related data from your vehicle’s on-board diagnostic system to identify malfunction events. Related data includes engine coolant temperature, fuel injection volume, engine rotation per minute (RPM), and other data to assist in identifying issues and analyzing the performance of your vehicle. For hybrid vehicles, Vehicle Health Data includes hybrid battery data correlated to Location Data. For electric vehicles, Vehicle Health Data includes battery charge data and electricity consumed for charging.
      2. If you opt-in to Service Connect, we use Vehicle Health Data to (a) tell you when your vehicle is due for maintenance or service, (b) provide you with vehicle health reports (maintenance and malfunction statuses, and service campaign and safety recall information) and vehicle alerts (notifications when your vehicle reports malfunction-related events) and (c) contact you.
    7. Multimedia Screen Data. We may collect and use Multimedia Screen Data (how you interact with your screen) for quality confirmation, and to improve functionality and product offerings.
    8. Voice Recordings. If you or anyone in your vehicle speaks with the Response Center for purposes of emergency services, roadside assistance, stolen vehicle locator, Destination Assist, or any other reason, your conversation will be recorded (“Video Recordings”) to deliver the Services to you and for quality assurance.
    9. Voice Recognition Recordings. In select models with hands-free control of in-car multimedia and a linked smartphone, we may collect Voice Recordings to improve the quality and performance of voice recognition capabilities.
    10. Anonymized or Aggregated Information. We may anonymize or aggregate personal information collected from you and use such anonymized and aggregated information for data-analysis, research, and any other purposes.
    11. Other Uses. Where applicable, we use Location Data, Driving Data, Vehicle Health Data, data derived from Safety Connect (which includes automatic collision notification, roadside, emergency and stolen vehicle assistance), navigation, Remote Connect, Service Connect, and Wi-Fi connectivity for the following purposes:
      1. Improve Safety.
      2. Develop New Vehicles and Features.
      3. Confirm Quality.
      4. Analyze Data (e.g., Vehicle Trends).
      5. Prevent Fraud or Misuse.
      6. As Required by Law or Legal Process.

III. STORAGE OF INFORMATION

  1. Account Information
    1. We store your Account Information for four (4) years after expiration of your subscription for the Services.
  2. Vehicle Location, Driving Data, Health Data, Multimedia Screen Data, Voice Recordings, and Remote Data
    1. Data collected from your vehicle is stored for different periods of time.
      1. Location Data. We will store Location Data in an identifiable format for a period of time not to exceed 10 years from the date of creation.
      2. Driving Data. We will store Driving Data in an identifiable format for a period of time not to exceed 15 years from the date of creation.
      3. Multimedia Screen Data. We will store Multimedia Screen Data in an identifiable format for a period of time not to exceed 10 years from the date of creation.
      4. Vehicle Health Data. We will store Vehicle Health Data in an identifiable format for a period of time not to exceed 15 years from the date of receipt by us. We will also store your vehicle health reports for 12 months from the date of creation.
      5. Voice Recordings. If you (or vehicle occupants) speak with the Response Center, your conversation may be recorded and stored for up to two (2) years; and a record of your conversation may be stored for up to four (4) years.
      6. Remote Data. We store the real time status and Location Data of your vehicle from the last ignition off for the purpose of delivering your vehicle’s most recent information in support of Remote Connect services. We retain this data for four (4) years.
      7. As Required by Law. For all of (a) through (f), notwithstanding the retention periods set out above, we may retain such information as required by law, legal process or litigation, and to support requests from you or law enforcement.

IV. SHARING OF INFORMATION

  1. Account Information
    1. We may share your Account Information with:
      1. Emergency Responders. To provide emergency assistance to you with our Safety Connect feature. This includes roadside assistance providers.
      2. Our Affiliates. To support vehicle improvement. Also, if your lienholder/lessor is Toyota Credit Canada Inc. (“TCCI”) and TCCI requests that we find your vehicle because of (1) alleged fraud or (2) breach of your lease, retail installment contract or vehicle loan with TCCI, we can try to locate your vehicle and share that location with TCCI. TCCI will be required to contact us directly and provide us with the information we request to verify the fraud or breach of your lease, retail installment contract, or vehicle loan.
      3. Our Parent Company. We may also share your personal information to support safety, research, analysis, and product development by our parent company, Toyota Motor Corporation.
      4. Third Party Service Providers. We contractually bind our third party service providers and contractors to keep your personal information confidential and to use it only for the purposes for which we disclose it to them, and to process your personal information in accordance with the same standards set out in this Privacy Notice. For example, Toyota Connected North America, Inc. provides customer support and the other services that are part of the Services, and apps such as Amazon (example: “Alexa, start my vehicle”) may store and use the information you provide to them in order to verify your account and provide you with their services.
      5. Your Dealer. We may share your Account Information and Vehicle Health Data (for Service Connect) with a specified dealer only if you have provided your prior express consent or as required by law.
      6. Vehicle Sale or Transfer. As the owner/lessee of a vehicle equipped with a “Connected Services” system, if you do not notify us of a sale or transfer of your vehicle, and do not take steps to remove your information from the vehicle and from your Toyota or Lexus app, your information may continue to be accessible from the vehicle and/or we may continue to send data and reports about the vehicle to your account. We are not responsible for any privacy related damages suffered by you or the new owner/lessee as a result of failure to take these steps.
      7. Law Enforcement. We DO NOT share your personal information with law enforcement unless we are required to do so by law or legal process, in response to government investigations, as may be required for national security, or where we believe it necessary to prevent harm, injury or loss, or to investigate suspected instances of fraud.
    2. We DO NOT share your Account Information with:
      1. Data Resellers.
      2. Social Networks.
      3. Ad Networks.
      4. Insurance Providers, unless we have your consent or as required by law.
  2. Your Vehicle Location Data, Driving Data, and Health Data

    We may share the following data with our affiliates and business partners for quality confirmation, and product development. We also share the following data with others if required by law, litigation, legal process, customer service and our legitimate business purposes.

    1. Location Data. We may share your vehicle’s Location Data, linked to your VIN, and Account Information with emergency responders, law enforcement, our affiliates and service providers acting on our behalf, as well as any compatible third party services you have authorized to receive your vehicle’s Location Data. With your consent, if your vehicle is stolen or you are attempting to locate missing persons, we can try to locate your vehicle and share that Location Data with local authorities. We can work with local authorities to recover the vehicle utilizing the vehicle’s GPS.

      Automatic collision notification operates so that if the airbag sensor is triggered or there is a severe rear-end collision of your vehicle, your vehicle will send an electronic signal to our Response Center and record and transmit your vehicle location, so that we can share your Account Information and vehicle location with emergency responders and provide assistance to you. If you press the “SOS” button, your vehicle will send an electronic signal to our Response Center and record and transmit your vehicle location so that we can share your Account Information and vehicle location with emergency responders and provide assistance to you.

    2. Voice Recordings. We share Voice Recordings with law enforcement and our service providers acting on our behalf in order to provide Connected Services to you.
    3. Remote Data. We share your vehicle’s Location Data based on last ignition off to assist you in finding your vehicle. When you press the “Destination Assist” button on your in-vehicle navigation unit, your vehicle will send an electronic signal to the Response Center which identifies your vehicle location to the Response Center agent who answers your call. We also share real time status of your vehicle (i.e., vehicle location, status of powered doors, windows, hood, trunk, sunroof, hazard lights, odometer reading, oil life, fuel economy, trip distance, distance to empty) only with you.
    4. Multimedia Screen Data. We may share your Multimedia Screen Data with our parent company for quality confirmation, and to improve functionality and product offerings.
    5. Driving Data. We share Driving Data with our affiliates and business partners so we can work together to provide Connected Services to you and for product improvement. If you provide express prior consent, we may also share your Driving Data with our affiliates and non-affiliated insurance companies to provide you with usage-based insurance information and offers. We will also share Driving Data with compatible third party services but only when you authorize us to do so.
    6. Vehicle Health Data. If you specifically agree to allow us to share your Vehicle Health Data with a specific dealer for its own use, we will share your most current Vehicle Health Data, linked to your VIN and Account Information, and last 12 monthly vehicle health reports with such dealer.
    7. Aggregated Data Sharing. We may sometimes share anonymized and aggregated Location Data, Driving Data and Vehicle Health Data with business partners for education and research related to environmental and energy issues, advanced technologies, and usage analysis.
    8. Compatible Third Party Services. We may send Location Data and voice request transcriptions to compatible third party services or technologies you have linked to your Connected Services account.

V. TRANSFERRING INFORMATION

We may transfer personal information that we collect or that you provide as described in this Privacy Notice to contractors, service providers, and other third parties we use to support our business and who are contractually obligated to keep personal information confidential, use it only for the purposes for which we disclose it to them, and to process the personal information with the same standards set out in this Privacy Notice.

We process, store, and transfer your personal information in and to the USA and Japan, countries with different privacy laws that may or may not be as comprehensive as Canadian law. In these circumstances, the governments, courts, law enforcement, or regulatory agencies of that country may be able to obtain access to your personal information through the laws of the foreign country. Whenever we engage a service provider, we require that its privacy and security standards adhere to this Privacy Notice and applicable Canadian privacy legislation.

VI SECURITY

  1. We take information security seriously.
  2. We protect your data and secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure through the use of a risk-based security program that relies upon a range of physical, technical and administrative controls, such as the use of dedicated networks and encryption, as appropriate.
  3. Our security program includes:
    1. System Defenses. We designed the Services technology to provide data security based on fundamental security principles such as integrity, confidentiality, and availability. It employs layers of defense to drive strong safeguarding practices, such as, where appropriate, code and design reviews, security testing, firewalls, intrusion detection systems, signing and encryption.
    2. Private and Public Wireless Networks. We use both private and public wireless networks to receive data transmitted from your vehicle. If a public network is used, the data is encrypted. In addition, your vehicle is designed only to respond to commands from you and any authorized users, or from us and only for those features we provide such as door lock/unlock, remote engine start/stop and vehicle location.
    3. No Warranties. Please note, however, that we cannot completely ensure or warrant the security of any information transmitted to us by you or your vehicle. Your use of your vehicle’s Connected Services and App Suite is at your own risk. You have the option to opt-out of Connected Services or request deactivation of data transmission (a) by contacting us via the “SOS” button in your vehicle, (b) by calling Customer Care, or (c) via your Toyota or Lexus App.

VII CHOICE

  1. Choices. We give you choices about what data you share with us.
    1. Opt-in/Opt-out.
      1. Service Connect Communication. You may opt-in to share Vehicle Health Data with your dealer for its own use and allow your dealer, with your express consent, to contact you by cell phone call for service appointments and service-related marketing at the number you provided.
        1. You may opt-out of Service Connect Communication at any time, and you will no longer receive phone calls about upcoming service appointments and other service-related marketing messages from your dealer. To opt-out, you must use the Toyota or Lexus app. This is the exclusive method to opt-out from Service Connect Communications for service appointments and service-related phone calls from your dealer. Please allow five (5) business days to process revocation status. I understand that opting out of Service Connect Communication does not turn off vehicle data transmission or opt me out of other connected services or opt me out from communications from my dealer generated independent of Service Connect.
      2. Fuel Cell and Plug-in Hybrid Vehicle Applications. You may opt-in or opt-out of fuel cell or electric vehicle plug-in hybrid vehicle applications, such as Low Carbon Fuel Standards and Vehicle Grid Integration. If you opt-out, your vehicle will not send us real time status data, such as the vehicle location, status of powered doors, windows, trunk, hood, sunroof, hazard lights, odometer reading, oil life, fuel economy information, and distance to empty.
    2. Review and Update. You may also review and update your Account Information at any time by contacting us. (See Contact Us Section.)
    3. Deactivation. When you lease or buy a vehicle equipped with Connected Services, data collection is active. You may opt-out of Connected Services or request deactivation of data transmission at any time by contacting us and we will no longer collect certain Account Information, Location Data, Driving Data and Vehicle Health Data.

VIII CONSENT

  1. You Agree To This Privacy Notice When You:
    1. Opt in to receive the Services using the Connected Services Agreement provided at the time of purchase/lease from an authorized dealer.
    2. Agree to a Connected Services Master Data Consent for the Services through the App or through live agent enrollment.

      Warning: By agreeing to this Privacy Notice, you specifically consent to our collection, use, and disclosure of your personal information and data as described above, and our storage of such data as described in this Privacy Notice. You can choose to opt-out of the Services at any time. You can also request deactivation of data transmission, which disables our collection and use of certain Account Information and vehicle data as described above.

NOTE: If you did not accept the Connected Services Agreement provided to you by your Dealer upon delivery of your vehicle, and if you do not wish to receive Services, please notify us within 15 days of taking delivery of the vehicle and we will cancel your Services. Failure to cancel your Services within 15 days of receipt of the Connected Services Agreement will be deemed acceptance of the Connected Services Agreement. You can disable the Services at any time.

IX YOUR RIGHTS

  1. ACCESSING AND CORRECTING YOUR PERSONAL INFORMATION

    It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes. By law you have the right to request access to and to correct the personal information that we hold about you.

    You can review and change your Account Information by logging into the Lexus or Toyota app and visiting your account profile page.

    If you want to review, verify, correct, or withdraw consent to the use of your personal information you may also contact us using the information provided below to request access to, correct, or delete any personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect. We may charge you a fee to access your personal information, however, we will notify you of any fee in advance.

    We may request specific information from you to help us confirm your identity and your right to access, and to provide you with the personal information that we hold about you or make your requested changes. Applicable law may allow or require us to refuse to provide you with access to some or all of the personal information that we hold about you, or we may have destroyed, erased, or made your personal information anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

  2. WITHDRAWING YOUR CONSENT

    Where you have provided your consent to the collection, use, and disclosure of your personal information, you may have the legal right to withdraw your consent under certain circumstances. To withdraw your consent, if applicable, contact us using the information provided below. Please note that if you withdraw your consent we may not be able to provide you with a particular product or service. We will explain the impact to you at the time to help you with your decision.

X. AGREEMENT

  1. Sample Agreements. To view a copy our most recent Services related agreements, please go here www.toyota.ca/connectedservices-privacy or www.lexus.ca/connectedservices-privacy

XI. CONTACT US

  1. Contact Us

    If you have questions or concerns about this Privacy Notice, or would like to request deactivation of data transmission, update your Account Information, or opt-in or opt-out from particular features, please contact us.

    • LEXUS VEHICLES:
      Phone: 1-800-265-3987
      Toyota Canada, One Toyota Place,
      Toronto, ON, M1H 1H9
    • TOYOTA VEHICLES:
      Phone: 1-888-869-6828
      Toyota Canada, One Toyota Place,
      Toronto, ON, M1H 1H9

We have procedures in place to receive and respond to complaints or inquiries about our handling of personal information, our compliance with this Privacy Notice, and with applicable privacy laws. To discuss our compliance with this Privacy Notice please contact our Privacy Officer using the contact information listed above.

Click here to see our Privacy Policy.

NOTE: If you did not accept the Agreement, please notify us within 15 days of taking delivery of the vehicle and we will cancel your Services. Failure to cancel your Services within 15 days of receipt of the Agreement will be deemed acceptance of the Agreement.